Malware

Updated Danabot malware emerges after takedown Months after being disrupted as part of the law enforcement effort Operation Endgame, the Danabot banking trojan has resurfaced with the new version 669, according to Cyber Security News.

Newly discovered Maverick banking trojan was found to have notable similarities with the Coyote malware, The Hacker News reports.

Operations of the Rhadamanthys information-stealing malware were noted by a developer to have been disrupted by German law enforcement following the infiltration of its EU data center-hosted web panels by German IP addresses before cybercriminals' access was revoked, reports BleepingComputer.

Fantasy Hub enables attackers to take control of infected devices, intercept SMS messages, and access contacts, call logs, images and videos.

BleepingComputer reports that attackers have resumed the distribution of the GlassWorm malware through three new VSCode extensions just days after Open VSX revoked access tokens used by accounts compromised by the malware.

High-end Samsung Galaxy phones, including the S22 through S24 devices, Z Fold4, and Z Flip4, impacted by a zero-day vulnerability were subjected to attacks that spread the commercial-grade LANDFALL spyware over a nine-month hacking campaign, reports The Record, a news site by cybersecurity firm Recorded Future.

Malware was set to be deployed between 2027 and 2028 by nine of the dozen NuGet packages uploaded by shanhai666 between 2023 and 2024, according to The Register.